The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
7,457 vulnerabilities with CWE-416
CVE-2026-45996
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-45995
HIGH
io_uring/zcrx: fix user_struct uaf
CVSS 7.8
CVE-2026-45989
HIGH
of: unittest: fix use-after-free in testdrv_probe()
CVSS 7.8
CVE-2026-45984
HIGH
gfs2: Fix use-after-free in iomap inline data write path
CVSS 7.8
CVE-2026-45980
HIGH
accel/amdxdna: Stop job scheduling across aie2_release_resource()
CVSS 7.8
CVE-2026-45972
CRITICAL
smb: client: fix potential UAF and double free in smb2_open_file()
CVSS 9.8
CVE-2026-45970
HIGH
bonding: alb: fix UAF in rlb_arp_recv during bond up/down
CVSS 7.8
CVE-2026-45956
HIGH
drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
CVSS 7.8
CVE-2026-45951
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-45946
HIGH
power: supply: ab8500: Fix use-after-free in power_supply_changed()
CVSS 7.8
CVE-2026-24200
HIGH
Nvidia Virtual Gpu Manager - Use After Free
CVSS 7.0
CVE-2026-24187
HIGH
Nvidia GeForce - Use After Free
CVSS 8.8
CVE-2026-41401
MEDIUM
libyang - Heap Use-After-Free Write in XML Metadata Parsing
CVSS 6.5
CVE-2026-45251
HIGH
FreeBSD 15.0-RELEASE < p9, 14.4-RELEASE < p5, 14.3-RELEASE < p14 - Use-After-Free in poll(2) or select(2)
CVSS 7.8
CVE-2026-9126
HIGH
Google Chrome < 148.0.7778.179 - Use-After-Free in DOM
CVSS 8.8
CVE-2026-9120
HIGH
Google Chrome < 148.0.7778.179 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2026-9118
HIGH
Google Chrome < 148.0.7778.179 - Use-After-Free in XR
CVSS 8.8
CVE-2026-9114
HIGH
Google Chrome < 148.0.7778.179 - Use-After-Free in QUIC
CVSS 8.8
CVE-2026-9112
HIGH
Google Chrome < 148.0.7778.179 - Use-After-Free in GPU
CVSS 8.8
CVE-2026-9111
HIGH
Google Chrome < 148.0.7778.179 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2026-5947
HIGH
SIG(0) validation during query flood may lead to undefined behavior
CVSS 7.5
CVE-2026-3593
HIGH
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
CVSS 7.4
CVE-2026-33278
CRITICAL
Unbound 1.19.1-1.25.0 - Use-After-Free in DNSSEC Validator via Deep Copy Pointer Overwrite
CVSS 9.8
CVE-2026-8953
CRITICAL
Sandbox escape due to use-after-free in the Disability Access APIs component
CVSS 9.6
CVE-2026-8947
HIGH
Use-after-free in the DOM: Bindings (WebIDL) component
CVSS 7.3
Details
Vulnerabilities
7,457
Exploit Likelihood
High